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We claim: 



1. An access control method for an internet television system, the access control 
method comprising: 

5 distributing access control information from a distribution device to an access 

device for use by the access device in authenticating a subsequent request by a host device 
to join a television channel multicast group; 

receiving, by the access device, the subsequent request by the host device to join 
the television channel multicast group; 
10 determining, by the access device, whether the host device is authorized to join the 

television channel multicast group based upon the access control information distributed 
from the distribution device; and 

admitting, by the access device, the host device to the television channel multicast 
group if and only if the host device is determined to be authorized to join the television 
15 channel multicast group. 

2. The access control method of claim 1, wherein distributing the access control 
information from the distribution device to the access device comprises: 

pushing the access control information from the distribution device to the access 
20 control device using a predetermined push mechanism. 

3. The access control method of claim 2, wherein the predetermined push mechanism 
comprises a reliable multicast mechanism. 

25 4. The access control method of claim 3, wherein pushing the access control 

information from the distribution device to the access control device using the 
predetermined push mechanism comprises: 

joining a predetermined multicast group by the access device; 
sending the access control information to the predetermined multicast group by the 
30 distribution device using the reliable multicast mechanism; 
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receiving the access control information by the access device from the multicast 
group using the reliable multicast mechanism. 

5. The access control method of claim 2, wherein the predetermined push mechanism 
comprises a policy service. 

6. The access control method of claim 5, wherein the policy service comprises a 
Common Open Policy Service (COPS). 

I. The access control method of claim 5, wherein pushing the access control 
information from the distribution device to the access control device using a 
predetermined push mechanism comprises: 

sending the access control information from the distribution device to the access 
device in the form of policy information using the policy service. 

8. The access control method of claim 2, wherein the predetermined push mechanism 
comprises a management mechanism. 

9. The access control method of claim 8, wherein the management mechanism 
comprises a Simple Network Management Protocol (SNMP). 

10. The access control method of claim 8, wherein the management mechanism 
comprises a Command Line Interface (CLI). 

II. The access control method of claim 8, wherein pushing the access control 
information from the distribution device to the access control device using a 
predetermined push mechanism comprises: 

sending the access control information from the distribution device to the access 
device in the form of management information using the management mechanism. 
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12. The access control method of claim 1, wherein determining whether the host 
device is authorized to join the television channel multicast group comprises: 

authenticating the host device based upon the access control information. 

5 13. The access control method of claim 1, wherein admitting the host device to the 

television channel multicast group comprises: 

joining the television channel multicast group by the access device using a 
predetermined multicast routing protocol. 



10 



14. The access control method of claim 13, wherein the predetermined multicast 
routing protocol comprises a Protocol Independent Multicast (PIM) multicast routing 
protocol. 
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15. An apparatus for distributing access control information in an internet television 
system, the apparatus comprising: 

maintenance logic operably coupled to maintain access control information; and 
distribution logic operably coupled to distribute the access control information to at 
least one access device using a predetermined push mechanism. 

16. The apparatus of claim 15, wherein the predetermined push mechanism comprises 
a reliable multicast mechanism. 

17. The apparatus of claim 16, wherein the distribution logic is operably coupled to 
send the access control information to a predetermined multicast group using the reliable 
multicast mechanism. 

18. The apparatus of claim 15, wherein the predetermined push mechanism comprises 
a policy service. 

19. The apparatus of claim 18, wherein the policy service comprises a Common Open 
Policy Service (COPS). 

20. The apparatus of claim 18, wherein the distribution logic is operably coupled to 
send the access control information to the access device in the form of policy information 
using the policy service. 

21. The apparatus of claim 15, wherein the predetermined push mechanism comprises 
a management mechanism. 

22. The apparatus of claim 21, wherein the management mechanism comprises a 
Simple Network Management Protocol (SNMP). 
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23. The apparatus of claim 21, wherein the management mechanism comprises a 
Command Line Interface (CLI). 

24. The apparatus of claim 21, wherein the distribution logic is operably coupled to 
send the access control information from the distribution device to the access device in 
form of management information using the management mechanism. 
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25. A computer program for controlling a computer system, the computer program 
comprising: 

maintenance logic programmed to maintain access control information; and 
distribution logic programmed to distribute the access control information to at 
least one access device using a predetermined push mechanism. 

26. The computer program of claim 25, wherein the predetermined push mechanism 
comprises a reliable multicast mechanism. 

27. The computer program of claim 26, wherein the distribution logic is programmed 
to send the access control information to a predetermined multicast group using the 
reliable multicast mechanism. 

28. The computer program of claim 25, wherein the predetermined push mechanism 
comprises a policy service. 

29. The computer program of claim 28, wherein the policy service comprises a 
Common Open Policy Service (COPS). 

30. The computer program of claim 28, wherein the distribution logic is programmed 
to send the access control information to the access device in the form of policy 
information using the policy service. 

31. The computer program of claim 25, wherein the predetermined push mechanism 
comprises a management mechanism. 

32. The computer program of claim 31, wherein the management mechanism 
comprises a Simple Network Management Protocol (SNMP). 
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33. The computer program of claim 31, wherein the management mechanism 
comprises a Command Line Interface (CLI). 



34. The computer program of claim 31, wherein the distribution logic is programmed 
to send the access control information from the distribution device to the access device in 
the form of management information using the management mechanism. 
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35. An apparatus for providing receiver access control in an internet television system, 
the apparatus comprising: 

distribution logic operably coupled to receive access control information from a 
distribution device using a predetermined push mechanism; 
5 host interface logic operably coupled to receive a request from a host device to join 

a television channel multicast group; and 

access control logic operably coupled to determine whether the host device is 
authorized to join the television channel multicast group based upon the access control 
information. 

0 

36. The apparatus of claim 35, wherein the predetermined push mechanism comprises 
a reliable multicast mechanism. 



37. The apparatus of claim 36, wherein the distribution logic is operably coupled to 
15 join a predetermined multicast group and receive the access control information from the 

predetermined multicast group using the reliable multicast mechanism. 

38. The apparatus of claim 35, wherein the predetermined push mechanism comprises 
a policy service. 

20 

39. The apparatus of claim 38, wherein the policy service comprises a Common Open 
Policy Service (COPS). 

40. The apparatus of claim 38, wherein the distribution logic is operably coupled to 
25 receive the access control information from the distribution device in the form of policy 

information using the policy service. 

41. The apparatus of claim 35, wherein the predetermined push mechanism comprises 
a management mechanism. 



30 
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42. The apparatus of claim 41, wherein the management mechanism comprises a 
Simple Network Management Protocol (SNMP). 

43. The apparatus of claim 41, wherein the management mechanism comprises a 
Command Line Interface (CLI). 

44. The apparatus of claim 41, wherein the distribution logic is operably coupled to 
receive the access control information from the distribution device in the form of 
management information using the management mechanism. 
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45. A computer program for controlling a computer system, the computer program 
comprising: 

distribution logic programmed to receive access control information from a 
distribution device using a predetermined push mechanism; 

host interface logic programmed to receive a request from a host device to join a 
television channel multicast group; and 

access control logic programmed to determine whether the host device is 
authorized to join the television channel multicast group based upon the access control 
information. 

46. The computer program of claim 45, wherein the predetermined push mechanism 
comprises a reliable multicast mechanism. 



47. The computer program of claim 46, wherein the distribution logic is programmed 
15 to join a predetermined multicast group and receive the access control information from 

the predetermined multicast group using the reliable multicast mechanism. 

48. The computer program of claim 45, wherein the predetermined push mechanism 
comprises a policy service. 

20 

49. The computer program of claim 48, wherein the policy service comprises a 
Common Open Policy Service (COPS). 

50. The computer program of claim 48, wherein the distribution logic is programmed 
25 to receive the access control information from the distribution device in the form of policy 

information using the policy service. 

51. The computer program of claim 45, wherein the predetermined push mechanism 
comprises a management mechanism. 

30 
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52. The computer program of claim 51, wherein the management mechanism 
comprises a Simple Network Management Protocol (SNMP). 

53. The computer program of claim 51, wherein the management mechanism 
comprises a Command Line Interface (CLI). 

54. The computer program of claim 51, wherein the distribution logic is programmed 
to receive the access control information from the distribution device in the form of 
management information using the management mechanism. 
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55. An internet television system comprising a distribution device in communication 
with at least one access device over a communication network, wherein the distribution 
device uses a predetermined push mechanism to distribute access control information to 
the at least one access device, and wherein the at least one access device uses the access 
control information to control access to at least one television channel multicast group. 



